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The system « FALCON D+» will be delivered as follows: 

* Monitoring system for standard GSM-networks (GSM-900/1800) operating in 
the following modes 

* without application of encryption algorithms; 

* application of encryption algorithms A 5.1 when Ki is known; 

* application of encryption algorithm A5/2. 

Please read through the user’s manual thoroughly before operating the system! 
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1. General Definition of Purpose 

The Falcon D+ system is designed for surveillance tasks and monitoring of telephone 
conversations within the GSM 900/1 SOD networks. The system provides the option of both 
stationary and mobile operation. 



2. Technical data 

* The system ensures that monitoring of audio and data traffic within standard GSM 
900/1800 networks: 

* - Without application of encryption algorithms 

* - Application of encryption algorithm A5/2 [real-time] (decoding time: 0.01 sec.) 

* - Application of encryption algorithm A5/1 [real-time] when Ki is known 

* Default configuration of the system - 8 reception channels 

* The system ensures registration of radio-electronic circumstances within the radio cells to 
be monitored (frequency and characteristics of BCCH-channels) 

* Channels which are to be monitored are : according to task, manually selected by the user. 

* The system contains a database (up to 100,000 calling partners), operating in real-time, 

which can be accessed corresponding to the selected search criteria and parameters. 

* Calling partners are identified according to the IMEISV, IMSL TMSI, ISDN number (local 
and international number) 

* Assessment of presence of calling partners to be monitored and identification of specific 
parameters (TMSI) occurs automatically by means of a mobile phone with special 
software. The special software is contained in the scope of delivery. 

* Registration and storage of telephone conversations occurs on system's hard disk. 

* The system ensures registration and storage as audio codec - types FR ; EFR : HR. 

* Playback of recordings may be carried out by the system itself (Cool Edit-Software). 

* Identification of SMS and DTMF data. 

* Systems’s coverage: 

* Down-Link - up to 10 km 

* Up-Link - up to 500m in city 

* Assessment of coverage between calling partner and base station: 
accuracy of up to 550 m 

* Delivery format: in a special PC casing and Notebook 

* Operation System software: Windows XP 



3. Scope of delivery 

FALCON D+, main components: 

• PC Pentium 4-1.7 GHz or higher, 2 GB RAM „ 80 GB HDD 

• Circuit board with main generator and power supply module for receiver 

• Circuit board with 8 duplex-channel receivers 

• Circuit board with main processor ADP6201 PCI for digital signal processing 

• Data input module ADM21 4x1 DMX 

• Antenna system with integrated amplifier 

• Notebook with LAN interface and cable 

• Special software for analysis and evaluation 

• User's manual 
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• Optional: Mobile telephone with special function for assessment of calling 
partner's presence within the monitored GSM-cell (Ping-Handy) 

• Optional: Mobile telephone with Netmonitor 



4. Technical operating conditions 

4.1. Technical data and operating conditions 

In order to avoid destruction of the system, pay attention to the following: 

* Power source (type and voltage) must correspond to PC power supply! 

* Ambient temperature and humidity must comply with the operating standards of the 
respective device! 

* Operation and storage must not put in rooms of dust, acid, alkali and corrosion gas! 

* No operation under conditions which might lead to unfavourable mechanical, chemical, or 
atmospheric influences! 

* Do not expose the device to heavy vibrations! 

* When the device was exposed to low temperatures, do not turn it on immediately! Minimum 
temperature must be reached first; perspiration water must evaporate 

* When the device was exposed to extreme conditions (storage, transport), it must 
Jl acclimatise i: under optimum conditions for at least 2 hours. 

5. Description and function of FALCON D+ 

5.1 . Preparing the system for use 

Make sure the device is not damaged. If ? however, there is anything to complain about please 
contact to the manufacturer. 

5. 1.1 . Security advice 

* Make sure the power source complies with the specifications of the PC’s power supply before 
connecting the device to the mains supply. 

* Do not shut the louvers of the device! 

* The device must be turned off before any alterations in configuration are carried out. 

* Alterations on the system require approval of the manufacturer! 

» Do not use the antenna nearby power transmission lines! 

* Do not use the antenna nearby transmission antennae! 



5.1.2. Installation for Falcon D+ system 

Note: For installation software direct on Falcon D+ Controller, you need external monitor, mouse 
and keyboard. If LAN connection is working you can setup by Notebook client (remote controlled). 



5A.2A. /rrsta//mg the driver for ADP6202PCI module 

Install the driver by means of the standard tools of the system software. The driver Adp6201a.sys 
is to be found in the installation file FALCON Adp6201 Driver. 

Restart your Falcon D+ Controller after successful installation! 
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5.1. 2,2, Installing the ^FALCON D+ Controller » system 

In order to install the software, activate setup.exe from the installation file Falcon. The installation 
assistant guides you through the selection of files and software configuration. You may install the 
full version by choosing the installation option Typical. On successive !l starts i: the setup.exe 
program allows complete or partial reinstallation of the software. On system installation a single 
user (root) will be created, who has no password or administrator's rights. The system will be 
assigned the IP-address 127.0.0.1 and a database gsm39 will be created. 

Restart the system after successful software installation! 



Insfa/l/ng USB Cable driver for connection of the PING-mobile phone (If in delivery 
scope) 

Connect the PING-mobile phone to the system using the USB cable and install the driver by 
means of the enlosed CD. 



5.1 '2.3. Installing the software on Notebook client 

Before installation, please check some parameters in your Notebook client PC as follows: 
- Right mouse click in My Computer on desktop PC and select properties. Select 
Remote window and setting parameters as below: 
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Select Advance window. In "Performance press Settings button to setting parameters as below: 



System Properties 



Tjxj 



Sjiitem Restore | AtUtomatic Updates j Remose 
■jenerd \ DomputerNams Harare Advanced 

You true* be; fcggsd on as an AdrrinElmlor to make moot o i those chances. 
Performance 

Visual effects. ofoccssor ichedufng, memon usage, end virtual memory 



User Profiles 

Desktop settings related to^cur logon 



Sot'mgs 



Startup and Recovery 

System startup, system fa it ire. and deeuggng information 



Settings 



Environment Variables Encr Reporting 



OK 



Cancel 



kxA 



Performance options 



Visual EFects Advanced | 

Select the settings you want to use for - the appearerce ana 
performance of Windows on this computer. 

C Let Windows ohnese vjhats hast Her my enmputar 
C Adust fur best appearance 
f* Adjust hnt hast perhormanze 
Custom ; 



jJjsJ 



PI Animate windows when minmahg and maximizing 

|!~| Fade; or side menus into view 

E~| Fads- or side ToolTips into vew 

E~| Fade cue mane ife-nrs eFter dickng 

PI Show shadows under menus 

l~l Snow shadows under mouse pointer 

IT! Show tranaucent selection rectangle 

E~l Show window contents while dragging 

E~| Side open combo boxes 

E~| Side taskbar buttons 

n Smooth edges or se em Fonts 



ud 



Cancel 






Now you can install software Falcon D+ on your Notebook client 

In order to install the software, activate setup.exe from the installation file Falcon. The installation 
assistant guides you through the selection of files and software configuration. 
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You should select 2 setup features on your Notebook Client as below: 




On successive ‘'starts" the setup.exe program allows complete or partial reinstallation of the 
software. On system installation a single user (root) will be created, who has no password or 
administrator's rights. Database gsm39 will be created. 

Restart the Notebook client after successful software installation! 

5. 1.3. Preparing the system for use 

Connect network cable (LAN cable) from Notebook client to Falcon D+ Controller. 

Note: Cross over cable can be connected from Falcon D+ Controller direct to Notebook client 
Normal cable connection can be used for connected from Falcon D+ Controller to Notebook 
client by means of Hub or Switch. 

Connect the antenna cable to the BNC socket on the rear side of the Falcon D+ Controller. 

If you have ordered the optional Ping-Mobile phone, then connect the Ping-mobile phone to the 
COM or USB socket of the Falcon D+ Controller. An extension cable (USB) can be used so that 
mobile phone and antenna are suitably apart from each other 

• Connect the power supply cable to the mains supply; thereafter, turn on the Falcon D+ 
Controller. Green LED: hardware is ready for use. Red LED: Turn off hardware's power 
supply; wait for about 10 sec and turn it on again. If LED is red again, turn off power supply 
and contact the manufacturer. 

• Hardware of the Falcon D+ Controller is ready for use after approx. 10 mins of warming. 



CONFIDENTIAL 



page 5 




elaman 



•° 



o 




Power Supply Switch & Power LED 



Figure below shows operation of the Falcon D+ Controller in decoder and Controller mode. 
2 status of the decoder mode (Loader A52) as follows: 

Green: calculation data are loaded in main memory 

Red: loading process is running 






:05 



Controller 



Loader A52 



• Turn on Notebook client after startup completed double click on 'Terminal' 1 Icon on Desktop. 

Note: the first time running “Terminer, please selects correct servers name and Database 
(gsm39) as below: 
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5. 1.4. Starting the system 

Be sure that Falcon D+ Controller and Notebook client is completed startup. 

Double Click on the Icon 'Terminal 11 (on desktop Notebook client) to start the system. Enter a 
name and password into the dialog box (as figure below). 

Select a data base in the Settings file. 



If User registration 



% User registration 



U sememe 



*1 




root 



Passwoid 



i 

Login | Settings | Cancel 




Username 



Passwoid 



Login 



Settings 



Server 

|falcon3 

Database 



ill 



Cancel 



"3 



On first starting, you can interrupt the starting process by press Esc button. 

After the loading process the menu window Control center will appear on the screen. 




Main menu operation. 
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5.2. Operating the «FALCON» system 

5.2.1. Main menu items 

5.2.1. 1. Main menu item « Operation » 




Menu item Operation 



5. 2. 1.1.1. Menu item <Hosts> 

The menu item Hosts will show you one or more Hosts in system if you have. Falcon system can 
have one or more Hosts receiver. In this menu ; there are more information relatived to GSM 
network and Falcon receiver. Open the menu window Hosts from the main menu Operation > 

a 

Hosts or dick the icon Hosts on main menu bar. 
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5.2.1. 1,2, Menu item <Tasks> 

In this menu, you can see tasks of receiver. Channel monitored, Rx level percentage of 
decripted...also displayed in this window 

a 

Open the menu window Tasks from the main menu Operation > Tasks or click the icon on 
main menu bar. 




Menu item Task 
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5.2. 1.1.3. Menu item <Cails> 

Menu item Calls serves for Live listening in highter priority. 

m 

Open the menu window Calls from the main menu Operation > Calls or click the icon Calls on 
main menu bar. 




Menu item Calls 



5.2. 1.1.4. Menu item <Cells> 

The menu item Cells serves for network provider, base station, channel number... 

Q 

Open the menu window Cells from the main menu Operation > Cells or click the icon uefe on 
main menu bar. 




Menu item Cells. 
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5.2. 1.1.5. Menu item « Targets# 



The menu item Targets serves for retrieval of the entry window for editing the data base of targets 
to be monitored. Furthermore, automatic search for targets within the radio cell to be monitored 
occurs in this menu item. 

In order to retrieve the Targets window, either select Operation > Targets from the main menu or 



click the icon 1 on main menu bar. 
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5.2.1. 1.6. Menu item «Messages» 

The menu item Messages serves for retrieval of the search window wherein audio recordings can 
be played back as well as messages can be displayed. 

In order to retrieve the Messages window, either select Operation > Messages from the main 
menu or click the icon Me«a g « on main menu bar. 
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Menu item Messages 

5. 2.1. 1.7. Menu item «Exit» 

The submenu item Exit serves for terminating operation. 

0 

Click the icon £ »* on main menu bar, program will be exit if you select Yes and not exit if you 
select No 
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Main menu item Settings 



5. 2. 1.2.1. Menu item «Users» 

The submenu Users serves for retrieval of the authentication window wherein user rights can be 
defined. 



In order to retrieve the Users window, either select Operation > Users from the main menu or 

£ 

click the icon IIWK on main menu bar . 



There are various functions that define the rights of the respective user: 

Q 

Add - new user 

ar 



Add 

Delete 

Disable 

Update 



I-.**- - delete user 



El 



disable user 

storage of alterations in Access 



The Users window displays name (Login name) and description of the user (Description) in the 
form of a table. User rights are defined within the Check Box by ticking the respective options 
within the Access pad. 

Solely the root user may administrator users and assign them their rights. 
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Submenu User 



5.2. 1.2.2. Menu item «Setting$» 

The menu item Setting serves for setting parameters of Falcon D+ Controller 
In order to retrieve the Setting window, either select Settings > Settings from the main menu or 
■a 

dick the icon ss+i s : on main menu bar. 

The menu item serves for retrieval of the playback window, selection of loaded protocol data, 
selection of the path for connection to the Audio file and retrieval nof the folder containing decoder 
data. 

Types of loaded data: 

- «*.out» - file for loading ADP6201 PCI 

- «*.hex» - loading file FPGA: 

- cool2000.exe» - playback with CoolEdrt software 

- « ..\\Fatcon3\Sounds» - path for connection to the Audio file 
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Menu item Settings 



5.2.1. 2.3. Submenu « Search » 

The menu item Search serves for find essential parameters. This menu only activated when 
another menu was opened before. 

q 

In order to open Search menu, click the icon on main menu bar 



• Search 
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Seaioh in 
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II 
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Search 



S&arch for 
S&arch in 



Search Cancel 



Menu item Search 
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5.2. 1.2.2. Menu item «Change password# 

The menu item Change password serves for retrieval of the password window by the current 
user of the FALCON system. 



Change Password 



Current Password: 

New Password: 

Confirm New Password: 




*J 




Ok | Cancel 



5.2. 1.3. Main menu item «View» 




Main menu item View 



5.2.1. 2.5. Menu item «Show captions# 

The menu item Show capitons serves for pasting/deleting captions for keys of the main menu 
bars and submenu bars. 
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5.2.1 .4. Main menu item «Window» 

The main menu item Window serves for placing and aligning dialog boxes on the desktop. 




Main menu item Window 
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6. Radio monitoring GSM 900/1800 

6.1 . Installation and use of antenna 

The antenna is an essential pari of the system. Effectivity of the FALCON system depends on 
thorough installation and use of the antenna. 



6.1.1. Connecting the antenna to the system 

Connect the antenna to the system by means of the cable. The amplifier's PSU has an integrated 
resetting fuse in order to avoid damage to the system through short circuit within antenna or 
antenna cable. Resetting of fuse lasts approx. 1 hour 
Short circuit within PSU of the amplifier might cause reduced reception signals. 

In such case you should: 

• tu rn off sy ste m ! s po we r s u pp ly 

• fix antenna or antenna cable (remedy the cause for short circuit) 

• Turn on the system again after approx. 1 hour 

• perform system start 

• If the problem cannot be solved : please contact the manufacturer. 

Other causes for reduced reception signals could be a tear-off or damaged contact within the 
antenna cable. 

In such case you should: 

• turn off system f s power s u pply 

• make sure the antenna cable is not torn 

• turn on system's power supply again 

• perform system start 

If the problem cannot be solved : please contact the manufacturer. 



6.1.2. Operating conditions 

The antenna is not designed for operation under conditions of precipitation. If the antenna is 
operated on any roof, you should equip it with an additional weatherproof casing. 

Do not fold or compress the antenna cable! Do not damage its slipcover or its plug! Do not use 
any antennae which are not supplied by scope of delivery! Screw the antenna tightly onto the 
antenna casing and Falcon D+ Controller! 

6.1.3. Recommendations for installation of antenna 

By selecting the place of installation, pay attention to the following: 

• do not operate antenna nearby power transmission lines 

• do not operate antenna nearby transmission antennae 

• do not shield antenna with any metal constructions 

• secure maximum distance between reception antenna and Ping-mobile phone (If in the 
delivery scope) 

The selection of place of installation should comply with the criteria required by the base stations 
to be monitored (BCCH channels). Thus the place should ensure minimal numbers of errors and 
maximum reception level for all channels. 

Concerning this, the menu window Tasks provides all necessary information. 
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7. User’s steps to operate the system 

7.1. Net-monitoring - mobile phone (Optional) 

The NET-monitoring mobile phone serves for quick definition of main parameters of GSM- 
networks as well as definition of control channels of the base stations. In order to activate the 
NET-Monitoring mobile phone, select the menu item "Net monitor" and the corresponding pages 
from the opened window. 

Important pages are: 

page 1 - Information about BCCH-channei’s number of current base station and distance between 
base station and MS in relative measuring units (1 relative measuring unit = 550m) 

pages 3... 5- Information about BCCH channel numbers of neighbouring base stations 

page 10 - Information about TMSI and the channel number of current base station 

page 1 1 - BCCH channel system information of current base station 

page 12 - Information about activation of encoding and encoding type (CIPHER: A5x) and 
activation of HOPPING. These parameters are only displayed by Net-Monitor mobile phone during 
active phone call. 

The «Netmonitor.pdf» document provides detailed description of all pages of the "NetmonitorT 

Note: Use for your NET-Monitoring mobile phone a SIM-card which is supplied by the respective 
GSM provider to be monitored. Conduct all measurements nearby objects (targets) to be 
monitored. 

7.2. Analysis of radio-electronic circumstances 

Open the window Hosts to analyse the radio-electronic circumstances Therefore select the main 

y ft 

menu window Operation > Hosts or click the icon on main menu bar. Click s™ to start 

O 

scanning process. To interrupt scanning process, clicks. 

After that, within Cells window the following parameters appear in table form: 



ID 


- ID Number 


Hosts 


- Hosts name 


ARFCN 


- Radio channel number of base station (ARFCN) BS; 


Rx -level 


-Signal strength of BS dBm; 


NCC 


- Colour code of network: 


BCC 


- Colour code of BS: 


MCC 


- Radio code of country; 


Country 


- Name of country 


MNC 


- Radio code of network; 


Provider 


- Name of provider 


LAC 


- Code of zone: 


Cl 


- Network identify 


CCCHconf 


- Configuration of CCCH 


T3212 


-Timer 3212 


CA 


- Number of channels used by BS; 


BA 


- Number of channels of neighbouring BS; 


Errors, % 


- Number of processed data packets, number of erroneous data packets: 


Date/time 


- Date and time of recording; 


Comment 


- operator's comments on recordings. 
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The line ARFCN BS displays current results of analysis (Last: 74) 
Right mouse dick to display desired parameters in this window. 
Click left mouse to align selected parameters on the display. 
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To define base stations for monitoring, select Cells window from the main menu Operation > 

O 

Cells or click the icon c* . ARFCN channels of the monitored base stations can be entered by 
double click on the line of Cells window. 



Notice: System have 8 receivers, but you should switch on maximum up to 5 receivers. 
Remaining receivers are used for free ressources (hopping and handover) 



The data base provides several functions, which can be accessed by clicking the icons from the 
tool bar: 



Edit <F4> 


13 

Edit 


- Editing comments on selected BS; 




0 




Delete <Del> 


Delete 


- Deleting BS; 


Filter <Ctrl+F> 


V 

nri« 


- Ceils filter 


Refresh <F5> 


Rerieih 


- Renewal of list of BS. 


Default 


& 

Defout 


- Restore default 
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7.3. Data base 

7,3.1. Data base «Targets» 

In order to work with the Targets data base, open the data base display and editor window from 

■g? 

the main menu Operations > Targets or click the icon . 




Menu item Targets. 

The window displays the following object data in table form: 



ID 


- Own identifier: 


Name 


- Object name; 


Provider 


- Name of provider 


Priority 


- Assigned object priority; 


Group 


- Name of object group; 


ISDN 


- ISDN-number of object; 


IMEISV 


-IMEISV of object; 


1 MSI 


- IMSl of object; 


Ki 


- Ki of object; 


TMSI 


- Current TMSI of abject; 


TMSI updated 


- Renewal time for TMSI of object; 


Comment 


- Comments on recording; 


Number of calls 


- Number of received messages from object. 


Host 


- Host name 



Right mouse click in this window to change number of data to be dispalyed within corresponding 
window. 

Within data base those objects are processed whose priority is higher than it is defined in the 

Check priority window 

Messages from low priority objects are only registered on availability of sufficient resources. 
Registered low priority objects will be saved in the data base as new objects with a priority of 255. 
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Ali object data is entered into the data base. Messages from objects, whose priority is not less 
than the assigned one, are preferredly processed and resources of the system are made 
available. All object data is stored on HDD. 



The data base provides several functions, which can be accessed by clicking the icons from the 
tool bar: 



Load 

Replace... <Alt+R> 
Append... <Alt+A> 
Save 

Add target <F2> 



D 



• loads Targets data base from file. 

■ exchange of current object list for object list from file, 
extending the object list with objects from file. 

■ Storage of current object list in file. 

• adding new object. 

£3 



View detail/edit target <F4> Edit _ editing of selected object. 

9 

Delete target <Del> Dol5l( = - deletion of selected object. 

Delete the list - deletion of all objects or selected groups. 

Delete all Targets - deletion of all targets 

v 



Filter <Ctr!+F> FillBi - window for system settings and display of objects. 




Target Filter. 

Activate CheckBox to show objects and enter the required parameter. 



<§> 

• Refresh <F5> R * he - h - renewal of object list. 

The tool bar contains the Find on pad, wherein you can search for objects. 
The upper part of the window displays number of objectst. 

e g : Targets #. 
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For each message data of two objects (catling and answering abject) will be updated 
simultaneously within data base. 

If involved objects are not contained in the data base, they must be added to the darta base. 
Double click on objects with left mouse to view messages from the selected objects. 

□ 

On adding a new object (Add target <F2> Ada ) or editing a newly selected object (View detail ! 

0 

Edit target- F4> Edil ), an extra window with identification criteria will be opened. 




Menu item Targets 

The following object data is displayed in the editing window: 



Priority 

Name 

Provider 

Group 

ISDN 

IMEI 

IMS! 

Ki 

TMSI 

Comment 



- priority of object; 

- object name; 

- name of provider 

- name of object group: 

- ISDN-number of object; 

- IMEI of object; 

- I MSI of object; 

- Ki of object: 

- current TMSI of object: 

- comment on recording; 



On entering of new data or editing of existing data, the changes must be made within the 
corresponding line. 



Name of provider and name of object group can taken from data base. 

Editing of displayed parameters occurs in dialog boxes by clicking the icons 
changes are stored in the data base via 



and 



m 



The 



0 



Save 



CONFIDENTIAL 



page 23 






elaman 



•_ 



OfUM** SECURITY S01UT<0*I£ 



o 



Click Edit 



if you do not want to save the changes made in the editing mode. 



Real time listening-in occurs via: 

Open window Calls then live listen telephone conversation 



You should switch off the operating mode Calls, when either no listening-in or listening into 
messages of only a small number of objects is necessary. 



7.3.2. Searching an object within monitored zone (with optional Ping- 
Mobile phone) 

Search for an object within the monitored zone can occur easily by means of the Ping-mobile 
phone (If in delivery scope). The Ping-mobile phone makes a “silenf call to get access to current 
parameters of the object. 

Note, You must use a SIM-card of the monitored provider for your Ping-mobile phone 

There two options for searching an object: 

• manual search; 

* automatic search. 



7. 3, 2.1, Manual search 

• Select call diversion for Ping-mobile phone; 

• Go to system’s control panel ^Ping-mobile phone»; tick Stealth caller in CheckBox of the 
Targets window; 

• Turn off Automat in CheckBox; 

• Open field Caller ISDN: enter ISDN-number of Ping-mobile phone; 

• Select object with phone number from Targets window. 

• Dial object's phone number with your Ping-mobile phone and press Call. 

• When the message "diversion of all phone calls" appears on your display, abort phone call 
immediately. Repeat this procedure at intervals (5-10 times at intervals of 5-10 seconds). 

• When the message "diversion of all phone calls" appears on your display, abort phone call 
immediately. Repeat this procedure at intervals (5-10 times at intervals of 5-10 seconds). 

• Thereafter, press stop key on your Ping-mobile phone. 

If the wanted object is within the monitored zone, identification criteria of the object such as 
telephone number, IMSI, IMEISV and current TMSI will appear on the display of the FALCON 
system. 



7. 3. 2. 2. Automatic search 

• Connect Ping-mobile phone to the FALCON system by means of the interface cable; 

COM- or USB port. The window Settings > Devices > Phone connection shows the port to 
use. Secure maximum distance between FALCON system and Ping-mobile phone. 

• Activate Ping-mobile phone from the tool bar of the Targets window; Stealth caller in 
CheckBox; 

• Click Automat in CheckBox; 

• Settings for Ping-mobile phone: 

field Caller ISDN : ISDN-number of Ping-mobile phone, 
field Call duration, ms : duration of impuls in msec; 
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field Standby, ms: - duration of break between calls in msec- 
field Number of attempts: - number of calls; 

field Start analysis, ms: - start time of analysis of received message in msec; 

field Stop analysis, ms: - end time of analysis of received message between calls in msec. 

• Select object with ISDN-numberfrom Targets window. 

• Press Call and Stop to start and finish search. 
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windows Targets 



Operator’s tasks: 

1. Define optimum pulse length of Call duration {green indication) on Ping-mobile phone 
panel as well as length of Standby between calls (blue indication) in order to avoid that 
the call is put through to BS. Optimum settings can be identified by means of the MET- 
Monitoring mobile phone (serves as virtual target). 

2. Define optimum intervals for analysis of received messages (red indication ). with 
measuring time of call until reception of message and time of Start analysis until Stop 
analysis. 

Any test telephone with known IMEL I MSI orTMS! can be used for this procedure. 

The NET-Mon Storing mobile phone (optional) can be also used for easier identification of call 
parameters for the Ping-mobile phone 

If the object is found within the monitored zone, search will be stopped and identification criteria of 
the object such as I MS I, IMEISV and current IMS I will appear on the display. 



Wore 1. The recommended search algorithm for an object does not guarantee absolute 
information. It serves only as auxiliary means for the operator of the system. 

Note 2 Erroneous handling of the Ping-mobile phone might lead to complete exposure of the 
operation of the system! 



CONFIDENTIAL 



page 25 





elaman J? 



7.3.3. Data base < Messages > 

In order to work with the Messages data base, open the display and edit data base window from 

4» 

the main menu Operation > Messages or click the icon . 

Double click in the window database Targets with left mouse button to view in the windows 
Messages only the selected object. 
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window Messages 



The windows displays the following data in table form: 

ID - internal identifier; 

MS - object name of MS for current connection; 

BS - object name of BS for current connection; 

Direction - direction of connection for MS object; 

ISDN - ISDN-number of object via BS; 

Date/time - date and time of message; 

Duration - duration of message; 

Type -type of message; 

Data - Content of text message or file name containing audio recording; 
ARFCN - channel number of BS ; wherein message from object occurred; 
DTMF - content of DTMF message; 

Comment - comments on recording; 

Status - state of processing of messages 

User - name of user working with data base; 

Checked - date and time of editing of file containing recording of message 

Host - host name 



Right mouse dick to determine number of displays on screen. 

Click on headline with left mouse button to define position of the selected parameters on the 
display 

The data base provides several functions which can be activated by clicking the icons from the 
tool bar: 
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Copy file <F2> 

Edit message <F4> 

Delete message <Del> 
Delete file <Shift+Del> 
Delete the list 

Filter <Ctrl+F> 



Edit 



B 

Dcfclc 



Copying the file containing recording of selected message; 
Editing comments on selected message: 



Deletion of message; 

Deletion of file and recording of selected message; 
Deletion of all messages from data base; 



Fill « - retrieval of system settings window. 




Window Message Filter 

Within Message Filter window you may create user-defined filters on the basis of varying criteria 
and parameters. Creation of filters containing symbols occur in the Value window, e.g. % ....% 
symbols: parameter DTMF-Filter: % 34% 



Refresh list of messages <F5> K,tl * ,h - updates message list. 

The Find on. pad serves for search of messages within data base. 

The upper part of the window displays overall number of messages, 
e g. Messages: 4. 

Play back of the selected messages occurs via double click with left mouse button or pressing 
< Enter>. 



0 

The following entry windows will be opened for editing of messages (Edit <F4> Edit ): 
Check Box Processed - operator ticks «p!ay back message» 

Comment - operators comments on recording. 

All changes will be stored in the data base by clicking 
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8. Technical Data 





GSM 900 


GSM 1800 


Reception channels 


8 


Target numbers 


up to 1000 


Identification 


through IMSI, TMSL IMEI, Class mark. Telephone number, 
Distance 


Frequency range of Downlink 
(BTSzMS) 


935 ... 960 MHz 


1805... 1830 MHz 


Frequency range of Uplink 
(MS BIS) 


390 ... 915 MHz 


1710 . . 1735 MHz 


Channel spacing 


200 kHz 


Number of channel 


124 


375 


Freqraency deviation 


45 MHz 


95 MHz 


Frequency stability 


□ 0,03 ppm 


Receiver type 


wide range receiver 


Receiver sensitivity 


-105 dbm 


Antenna impedance 


50 □ 


Time of frequency change in 
Hopping mode 


< 500 ps 


Dynamics range 


> 75 dB 


Volume range 


25 dB 


Demodulator 


OMSK, asynchrony 


Decoder 


for Protocol A5-2 


Speech codex 


RPE/LTP: FR, EFR 


Channel structure 


TDMA/FDMA 


System software 


Windows XP 


Audio format 


standard Wave-format 


Power supply 


220 VAC, 50 Hz: 1 10 VAC : 60 Hz 
or external battery 12 V DC 


Operating temperature range 


+ 5 °C ., 


..40 °C 



Model No: 580 200 0012 



9. Scope of delivery 

• Main unit FALCON D+ 

• Control unit (Notebook) 

• network-connecting cable 

• Power supply cable 23DVAC 

• Dual-band antenna (magnetic mount) 

• User manual 

• Transport case 
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10. Support 

10.1. Guarantee 

It applies a legal guarantee period of 24 months for material and faulty manufacturing. 

There is no further, explicit or tacit guarantee possible. 

The manufacturer is not responsible for sequence damages. 

The warranty claim expires if repairs or interventions are done by persons who were not 
authorised by the manufacturer. 

Errors which occurred due to an inappropriate use of the device, incorrect maintains or the use of 
accessories or special accessories not advised by the manufacturer do not fall under guarantee. 



It is in no case allowed to open the device. 



Any installation procedures for the programs presuppose an in itself conflict-free operating system. 
Problem solutions for it require either an intensive detail knowledge of the used system or its 
compromise less reconstruction. 

The manufacturer does not take over any guarantee for that the programs or systems used by the 
user will furnish the striven utility. 

Should any warranty return take place ; it has before to be agreed by the manufacturer. Otherwise , 
it will not be handled. 

The manufacturer does not take over any transport damages or transport insurances. 

Any unfranked letter or parcel will not be accepted. If there is no error of the product found, a 
handling charge will be raised. 

10.2. Customer Service, Hotline 

Support is generally done by 

IBH-IMPEX Elektronik GmbH 
Friederikenplatz 55 a 
D-06844 Dessau 

Tel.: +49 340 2400242 

Fax.: +49 340 2400244 

E-Mail: mail@ibh-imoex.de 
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If you would like further Information about ELAMAN, 
or would like to discuss a specific requirement or project, please contact us at: 

Elaman GmbH 
German Security Solutions 
Seitzstr. 23 
80538 Munich 
Germany 

Tel: +49-89-24 20 91 80 
Fax: +49-89-24 20 91 81 
info@elaman.de 
www.elaman.de 




